- Billing
- Monthly subscription per site
- Includes
- Segmentation design, brokered vendor access, advisory tracking, change alerts, program backups, quarterly review and tabletop
- Standards
- IEC 62443 zones and conduits, NIST SP 800-82 Rev. 3
- Starts with
- A robot exposure assessment, or a recent one you already have
What's included
Cell segmentation
Each robot cell, or group of cells, becomes its own zone with a firewall in front of it. Only the traffic the cell needs is allowed through: the PLC, the HMI, the MES or WMS connection. Nothing comes in from the office network. This is the zones-and-conduits model from IEC 62443.
Vendor remote access, brokered
Integrators and robot vendors connect through a single access point. Sessions are requested, approved by your team, time-limited, protected with MFA and recorded. Always-on remote desktop tools on cell PCs are removed.
Advisory and patch tracking
We keep an inventory of your robot models and software versions and check it against vendor advisories and CISA ICS advisories. When one applies, you get a plain explanation, a risk rating and a patch or workaround plan scheduled around production. CVE-2026-8153 in Universal Robots PolyScope 5 is a recent example.
Change and anomaly alerts
Passive monitoring of cell traffic alerts on new devices, connections to unexpected addresses, and program or configuration changes outside planned maintenance windows.
Program backups
Robot programs and configurations are backed up and versioned after every approved change, so recovery after an incident or a failed update takes hours, not days.
Quarterly review and tabletop
Each quarter we review alerts, changes and open findings, and run a short tabletop exercise. For example: a cell stops and the HMI shows a ransom note. Who does what?
A typical first 90 days
| Weeks | Work |
|---|---|
| 1–2 | Agree the target segmentation and vendor access design with your IT team and integrator |
| 3–6 | Deploy firewall rules cell by cell during planned downtime. Move vendors to brokered access. |
| 6–8 | Turn on monitoring, set the baseline, tune alerts |
| 8–12 | Verify backups with a restore test. First quarterly review and tabletop. |
Common questions
Do we need to replace our robots or controllers?
No. Hardening works around the equipment you already have, using network controls, access controls and monitoring.
Who installs the firewalls?
We design the rules and work with your IT team or integrator to deploy them. If you prefer, we can supply and manage the hardware.
Will changes affect our integrator's warranty or safety validation?
Changes are planned with your integrator so warranties and safety validation stay intact. Network controls sit around the cell, not inside the safety system.
Does monitoring send plant data to the cloud?
Monitoring can run entirely on site, with only alerts sent to our team.
Robot cell acting up?
24/7 robot incident line: 646-560-5083. Not urgent? Book an exposure assessment and an engineer replies within one business day.